MrStonedOne

Attack vector requires local execution access and allows for escaping limited privileges like non-root user accounts and breaking out of (some?) namespace jails used by containers and sandboxing systems.

than disable that specific functionality until you can make the framework instead of throwing out the whole thing in a tempter tantrum?

I do not like being dependent on having a working phone to log in to my digital life.

Any break in my phone will take weeks for me to be able to afford to replace, meanwhile what? Im locked out of everything?

Why would I risk that?

Phone battery is dead so I got to wait 5 minutes to log into my forums while it charges enough to allow me to boot it and then boots?

Might as well move purely to yubikey in that case.

The whole point of using authy was the reliability of cloneable auth tokens between my desktop, laptop (desktop os) and phone.

3 piece holy trinity.

and what? you want to move that down to one?

Even if its backed up, what do I do while it is stolen or off for repairs?

The ENTIRE point of using authy over any other solution was that its wide app base made it more reliable.

They adversely selected for the userbase that would get mad over this

you picked up the wrong definition of "free".

They meant free as in freedom.

a man raping a man is rape in most jurisdictions, its only when women rape men does it become sexual assault or "other sexual violence".

Nobody outside of the uk knows what a "consumer unit" is. that sounds to me like you can't touch the breaker panel which is what you have to touch to wire in a new circuit.

I think you might be missing their concern.

The concern is that google basically funds firefox, and can choose to revoke that funding at the most inconvenient time for mozilla, risking bankruptcy. Companies ebb and flow on cash flow, and a unexpected drop at the exact wrong moment can cripple even the most well funded ones.

Or just threaten to do so to exert pressure.

Giving poor people a thousand a month caused them to get more jobs. Giving them 6k up front caused them to get even more jobs.[0] Author's argument is invalid.

Percentage of Participants Working Full-time, Enrollment and 6-month Follow-up:[1]

Group A (1000usd/m): 18% -> 25%

Group B (6500usd one time + 500usd/m): 21% -> 35%

Group C (50usd/m): 22% -> 22%

[0] https://news.ycombinator.com/item?id=37836296

[1] https://drive.google.com/file/d/1gqtOfZG2sSanWgUdzn-lx-pwSXZ... page 22 (pdf page 23) figure 9

The issue isn't tech debt, its tech interest.

Looking at the historical maintenance cost of the stacks when choosing them and prioritizing ones with a better history of backwards and forwards compatibility in their ecosystem does far more to prevent tech debt pile up than trying to reach a strict habit of bending over backwards to update dependencies.

Everybody points to uber but uber won against taxis because they had an app and taxis had a phone number that often wouldn't even accept a downtown cross st.

As a seattlite who got tired of hunting for a building that still had a street number just to get a cab on 5th and Jackson or what ever I'm glad uber killed taxis

related fun fact: splenda has more calories than sugar. it can say 0 calories because it has less than 5 per serving (packet)

There is nothing inclusive about perpetuating gender stereotypes.

Men are allowed to feel the same sense of privacy and intimacy over one's own body that we afford women, and pretending only women get harmed by the rampant abuse of photoshop on steroids doesn't do anybody any good.

More and more of the digital world, from the internet to what applications our devices allow us to install, is about filing off the edges and rounding all corners to make the world safer for the common denominator and i don't have to like it.

And as the digital world increasingly invades and influences our realities and experiences the importance of not only serving the common denominator gets more important, not less.

If the number of comments in a post or subthread exceeds the upvotes, this leads to the flame detector activating.

But also some accounts are just banned.

Banned accounts can still comment, but they start dead and have to be vouched first before showing to anybody who didn't enable showdead in their profile.

Everybody should have line item veto rights for code running on their computer.

if youtube wanted to make the ads unblockable, they could embed them in the primary video stream. They won't do that because then they would have to expend the computational effort of muxing the content instead of offloading it onto your computer. They want their code (javascript) to manage the ads to run on your computer and they want to be able to treat your computer as their slave.

“I did some bash-fu to extract the IPFS hashes from the emails and grep for them in my nginx logs, and was surprised to find not a single match,” Stanley explains. “None of them have ever been accessed, and of the ones that I checked, none even worked.”

First thoughts.

Deployment should focus on non-cloud deployments as a first class citizen.

Cloud is 100x more expensive on bandwidth and it is much easier to make a non-cloud product work in the cloud then make a cloud product work outside of the cloud.

I'd suggest moving to k3s and testing deployments on raspberry pis or one of the x64 based SBCs.

Or maybe work on deployments to vpses.

Making it easy with cloud should still also be a primary goal, just avoid making it hard to reduce costs by moving to rented dedicated servers or rented vpses. Some communities will need the 99% reduction.

Some of those UX dark patterns would qualify as making the site inaccessible to people with add and adhd, others make it inaccessible to people with autism.

engagement driving bullshit could very easy become banned under ADA if the right public servant gave it enough thought.

Only having one key bin/ folder for hard coded paths.

/usr/bin only existed because of fast small mainframe hard drives and slower larger hard drives.

I don't understand why the direction is the way it is thou. getting rid of /usr/ seems like it would make more sense.

Why should they have that right?

Any security model that can not differentiate the device owner from a threat actor misses the point of who security is meant to protect.

TPM and secure boot combined can create computers that run key-per-cpu encrypted system binaries that can not be modified by the device owner meaning next time microsoft does something fucky there will be no path out, no programs to disable it, its just how you have to live now.

Its not worth it to head down that path.

Not everybody is allowed to have bank accounts.

If apple wants to add a second wifi radio to handle carrier offloading, and having it treat this second wifi radio as a cellular radio by another medium, sure.

but I should have fullllllllllllllllll fucking control over what wifi network my device connects to.

The fact it can connect to mobile data is only 10% of the device, and i don't see why connecting to a carriers mobile network should grant that carrier the ability to edit user settings like what wifi networks its allowed to connect to.

The D&D world is not covered by the OGL. its the core mechanics that have been mirrored by not just other TTRPGs, but video game RPGs as well.

This is like if the names of the functions in the c++ STL (and their argument/return types) was released under gpl, and they came out and "updated" their license to be basically cc-by-sa-nc but worse and also claimed it retroactively applied to the license. It could technically have repercussions to other languages that mirrored the style.

Now the fun question! how much of what was covered by the OGL was actually copyrightable?

Ideas and facts are not copyrightable, arrangement of ideas and facts can be copyrightable with a higher bar of 'creativity', but the barrer to change before it becomes a new 'arrangement' and not covered is also lower.

TPM2.0 is required because it allows for running of encrypted binaries and microsoft will need that feature to ensure people can't modify away any user hostile features.

Heavy regulation isn't the issue, its heavy bureaucracy as a stick to beat people with.

His ""violations"" were all mistakes on the cities part or auditors trying to pigeonhole things into regulations they don't apply to.

He followed the regulations, and that wasn't even good enough.

You say he "used the dense, relatively wealthy New York ecosystem," to launch a business, but from their prospective i bet they feel they started a company in their hometown and then their hometown spat in their face in an attempt to get more money.

Copyright protects software better than patents do.

When I was an attorney and involved with these kinds of subpoenas, we always worked with the third-parties to make document production less burdensome for them.

SimulaVR should be working with Meta's attorneys on this instead of throwing a hissy fit online.

Question:

Is meta's lawyers bound in any way to treat simulaVR the same way you treated your subpoenaees?

I don't even care if they do, or would, the question is, are they legally bound to do so? If not, that's a systemic issue.

I suspect the answer is no they aren't, and the burden is on the subpoenaees to convince the court to limit the burdensomeness of the subpoena, which is itself a burden that is unacceptable.

Meta requested it, meta wrote the subpoena, and meta is the party who will receive the supplied documents.

You are confusing signed off by the court with issued by the court.

hardware required for isolation of powerline communication is gonna be hard to stuff in that small of a space.

Powerline tends to be sorta unreliable and only runs at like 5-15% of the rated max speed, but if you had buffering at the camera to ensure all frames made it to the otherside, you could work around that.